Can't get EasyVPN to work.

[jmaurin12]

Hi!

I'm trying to make EasyVPN to work in my test lab, but it doesn't. I've ran EasyVPN wizard in CiscoCP, created local user and pool, selected pre-shared key, etc... but when I try to connect remotly using CISCO AnyConnect vpn client I always get this error: No valid certificates available for authentication.

I already un-selected 'clock untrusted servers' in client, accepted 'invalid' certificated, but still the same error. Do I need to import any certificate on the client? How I do that?

I'm running AnyConnect as administrator BTW. My selected interface for EasyVPN Server is 'dialer1' since i'm using PPPoE interface (WAN) on my router.

[Philip D'Ath]

EasyVPN creates configs for the Cisco IPSec VPN client, not the Cisco AnyConnect SSL VPN client.

[jmaurin12]

Unfortunately, Cisco VPN Client doesn't work anymore in windows 10 :( So my only option is to migrate to another vpn, right?

[Philip D'Ath · Accepted solution]

You should migrate to Cisco's SSL VPN technology - and use AnyConnect.  Works fine in Windows 10.

Failing that you can use IKEv2 (the next generation of crypto after EasyVPN) with AnyConnect, but it is painful to do on a router.  I have created this guide to help people.

http://www.ifm.net.nz/cookbooks/Cisco-IOS-router-IKEv2-AnyConnect-Suite-B-Crypto.html